Jboss-HTTPS-Integration: Difference between revisions
| (2 intermediate revisions by one other user not shown) | |||
| Line 1: | Line 1: | ||
[[category:JBOSS Related]] | [[category:JBOSS Related]] | ||
[[category:Muthoot group]] | |||
== JBOSS-HTTPS-Integration == | == JBOSS-HTTPS-Integration (at Muthoot Group ) == | ||
| Line 26: | Line 27: | ||
==='''Download'''=== | ==='''Download'''=== | ||
Download for mod_jk for Centos / RHEL 5 | Download for mod_jk for Centos / RHEL 5-32bit | ||
http://ftp-hk.tmapy.cz/tmapy-twist/centos/5/updates/i386/RPMS/mod_jk-ap20-1.2.28-2.el5.i386.rpm | http://ftp-hk.tmapy.cz/tmapy-twist/centos/5/updates/i386/RPMS/mod_jk-ap20-1.2.28-2.el5.i386.rpm | ||
Download for mod_jk for Centos / RHEL 6-64bit | |||
http://ftp.tmapy.cz/tmapy-twist/centos/5/updates/x86_64/RPMS/mod_jk-ap20-1.2.28-2.el5.x86_64.rpm | |||
==='''Test Bed'''=== | ==='''Test Bed'''=== | ||
| Line 45: | Line 49: | ||
3. check for file mod_jk.so in /etc/httpd/modules/ | 3. check for file mod_jk.so in /etc/httpd/modules/ | ||
4. Add following line at the top of /etc/httpd/conf.d/ssl.conf | 4. Add in /etc/httpd/conf/httpd.conf | ||
<VirtualHost *:80> | |||
ServerName www.muthootonline.in | |||
ServerAlias muthootonline.in | |||
RewriteEngine on | |||
RewriteCond %{HTTPS} off | |||
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} | |||
</VirtualHost> | |||
5. Add following line at the top of /etc/httpd/conf.d/ssl.conf | |||
LoadModule jk_module modules/mod_jk.so | |||
JkWorkersFile conf/workers.properties | JkWorkersFile conf/workers.properties | ||
JkShmFile logs/mod_jk.shm | JkShmFile logs/mod_jk.shm | ||
JkLogFile logs/mod_jk.log | JkLogFile logs/mod_jk.log | ||
6 . Add following line after <VirtualHost _default_:443> | |||
JkLogLevel info | JkLogLevel info | ||
JkMount /* worker1 | JkMount /* worker1 | ||
| Line 64: | Line 80: | ||
scp -r /etc/httpd/conf/ssl 192.168.1.146:/etc/httpd/conf/ | scp -r /etc/httpd/conf/ssl 192.168.1.146:/etc/httpd/conf/ | ||
7. Make a new file /etc/httpd/conf/workers.properties having following entry | |||
worker.list=worker1 | worker.list=worker1 | ||
worker.worker1.type=ajp13 | worker.worker1.type=ajp13 | ||
| Line 70: | Line 87: | ||
worker.worker1.port=8009 | worker.worker1.port=8009 | ||
8. Restart httpd . and test https://<Servername>/ . It should open the page which is opening at http://<ServerName>:8080/ | |||
==='''Testing'''=== | ==='''Testing'''=== | ||
Go to URL https://192.168.1.215/ page and it should display the moothod login page . Enter the application with right credentials , you should be | Go to URL https://192.168.1.215/ page and it should display the moothod login page . Enter the application with right credentials , you should be seamlessly working . | ||
Also , normal http ( not https) should give you pages like test page of apache or for pgadmin you should get it via http://192.168.1.215/phpPgAdmin and so on . That means your old apache application / URLs should work as it is. | Also , normal http ( not https) should give you pages like test page of apache or for pgadmin you should get it via http://192.168.1.215/phpPgAdmin and so on . That means your old apache application / URLs should work as it is. | ||
Latest revision as of 08:49, 14 December 2013
JBOSS-HTTPS-Integration (at Muthoot Group )[edit]
Purpose[edit]
We have to ensure that access to the HRMS / ERP portal (JBOSS based Applications) is secure and based of standard mechanism with HTTPS / SSL access.
Objective[edit]
Move JBOSS access to SSL based access and that too on direct URL like https://Hostname/
and
Not on like http://hostname:port/ which is currently used .
Method[edit]
Mod_JK is used to integrate Apache with JBOSS
Referance document[edit]
Download[edit]
Download for mod_jk for Centos / RHEL 5-32bit http://ftp-hk.tmapy.cz/tmapy-twist/centos/5/updates/i386/RPMS/mod_jk-ap20-1.2.28-2.el5.i386.rpm
Download for mod_jk for Centos / RHEL 6-64bit http://ftp.tmapy.cz/tmapy-twist/centos/5/updates/x86_64/RPMS/mod_jk-ap20-1.2.28-2.el5.x86_64.rpm
Test Bed[edit]
Local Server - 192.168.1.215
Assumptions[edit]
The Actual URL is http://Servername-IP:port/ and is not in form of http://Servername-IP:port/app1
Process [edit]
1. Make Sure you have ssl for apache installed i.e yum install mod_ssl
2. Install mod_jk-ap20 , by downloading from http://ftp-hk.tmapy.cz/tmapy-twist/centos/5/updates/i386/RPMS/mod_jk-ap20-1.2.28-2.el5.i386.rpm and installaing via rpm -Uvh
3. check for file mod_jk.so in /etc/httpd/modules/
4. Add in /etc/httpd/conf/httpd.conf
<VirtualHost *:80>
ServerName www.muthootonline.in
ServerAlias muthootonline.in
RewriteEngine on
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
</VirtualHost>
5. Add following line at the top of /etc/httpd/conf.d/ssl.conf
LoadModule jk_module modules/mod_jk.so JkWorkersFile conf/workers.properties JkShmFile logs/mod_jk.shm JkLogFile logs/mod_jk.log
6 . Add following line after <VirtualHost _default_:443>
JkLogLevel info JkMount /* worker1
Modify the Line below
SSLProtocol all -SSLv2 SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW SSLCertificateFile /etc/httpd/conf/ssl/Muthootonline.in.crt SSLCertificateKeyFile /etc/httpd/conf/ssl/server.key SSLCertificateChainFile /etc/httpd/conf/ssl/gd_bundle.crt
Copy the ssl ( Certificates and Keys ) to this server by
scp -r /etc/httpd/conf/ssl 192.168.1.146:/etc/httpd/conf/
7. Make a new file /etc/httpd/conf/workers.properties having following entry
worker.list=worker1 worker.worker1.type=ajp13 worker.worker1.host=localhost worker.worker1.port=8009
8. Restart httpd . and test https://<Servername>/ . It should open the page which is opening at http://<ServerName>:8080/
Testing[edit]
Go to URL https://192.168.1.215/ page and it should display the moothod login page . Enter the application with right credentials , you should be seamlessly working .
Also , normal http ( not https) should give you pages like test page of apache or for pgadmin you should get it via http://192.168.1.215/phpPgAdmin and so on . That means your old apache application / URLs should work as it is.